45626067dc0fb228fddfa48f567a2344

General

Target
45626067dc0fb228fddfa48f567a2344
Size 300KB
Sample220526-wdf3wsdef5
SHA256 ff5ac0eb80d90c6a2a46a4133fc8d90cd165b8b2bac1cbaa8fadd35b186bd5c8
MD5 45626067dc0fb228fddfa48f567a2344
SHA1 1b7eb5dc6e081efa0ba55d291e45eb416f908bec
SHA512 19dd906a77785f0dd5d7fb4e27e29d8190eb56ce1b8057130f0945102ae06cbedfd615d152db1859c91a4371b83173945a862ac1c615dff4a3fbb96bc75e01e9
SSDEEP 6144:9Wwa9L2O+tk8RYfRVik6D5SmJppSmfkTD6uFKEpX0xhH:AN9CO+r8RVinlSQBwbk00
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

45626067dc0fb228fddfa48f567a2344

.exe 300KB

45626067dc0fb228fddfa48f567a2344

IMPHASH aee545a2e2a33f1be0cd9a6e598e2e21
SHA256 ff5ac0eb80d90c6a2a46a4133fc8d90cd165b8b2bac1cbaa8fadd35b186bd5c8
MD5 45626067dc0fb228fddfa48f567a2344
SHA1 1b7eb5dc6e081efa0ba55d291e45eb416f908bec
SHA512 19dd906a77785f0dd5d7fb4e27e29d8190eb56ce1b8057130f0945102ae06cbedfd615d152db1859c91a4371b83173945a862ac1c615dff4a3fbb96bc75e01e9
SSDEEP 6144:9Wwa9L2O+tk8RYfRVik6D5SmJppSmfkTD6uFKEpX0xhH:AN9CO+r8RVinlSQBwbk00
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6331

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute SetDefaultCommConfigW InitializeSListHead SetHandleInformation FreeEnvironmentStringsA GetConsoleAliasesLengthA GetCompressedFileSizeW GlobalAlloc GetLocaleInfoW SetSystemTimeAdjustment GetFileAttributesW SetTimeZoneInformation GetAtomNameW GetModuleFileNameW GetVolumePathNameA WritePrivateProfileStringW CreateJobObjectA GetLastError GetLongPathNameA HeapSize FreeLibrary EnterCriticalSection CreateMemoryResourceNotification GetAtomNameA LoadLibraryA GetProfileStringA BeginUpdateResourceA GetCommMask GlobalFindAtomW GetModuleHandleA VirtualProtect SetCalendarInfoA GetCurrentProcessId SetFileAttributesW LCMapStringW CompareStringW CompareStringA GetTimeZoneInformation ReadFile GetProcessHeap GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SetLocalTime EnumDateFormatsExW SetFilePointer SetPriorityClass RemoveVectoredExceptionHandler CreateJobSet GetEnvironmentVariableW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetStdHandle LeaveCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc RtlUnwind HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime FatalAppExitA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException SetConsoleCtrlHandler InterlockedExchange LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FlushFileBuffers SetEndOfFile SetEnvironmentVariableA

user32

GetMonitorInfoA GetUserObjectInformationW GetProcessDefaultLayout GetClassLongW

gdi32

GetBoundsRect

advapi32

GetPrivateObjectSecurity EqualSid RegCreateKeyW OpenEventLogW PrivilegedServiceAuditAlarmA GetEventLogInformation

Sharing

General

Malware Config

Signatures

File Explorer

45626067dc0fb228fddfa48f567a2344

kernel32

user32

gdi32

advapi32